Principal Platform Engineer | Identity Platform (AuthN/AuthZ)

IFS; Województwo małopolskie; On-site; PLN 260,000 - 420,000; Full time

Job summary

IFS is hiring two Principal Platform Engineers to unify authentication and authorisation across a next‑generation enterprise software platform. You will build shared services, APIs, and automation, owning them in production and enabling product teams to ship reliably with self‑service workflows.

The role emphasizes hands‑on platform engineering, infrastructure as code, deployment pipelines, and security‑focused delivery.

Qualifications

• Hands-on platform engineering experience
• Experience building and operating shared services or platforms
• Proficiency with infrastructure as code and deployment pipelines
• Experience with authentication/authorization systems is a plus
• Go language experience valued

Responsibilities

• Design and build platform services, APIs and automation
• Own production capabilities and establish repeatable delivery patterns
• Contribute to tooling and services, including Go components
• Enable other teams to use platform capabilities with self-service workflows

Skills

Platform engineering

Automation

Infrastructure as code

Go

Identity engineering

Tools

SpiceDB

PostgreSQL

Curity

Keycloak

Job description

Company Description

Please note that before you apply for this role, you should be a hands‑on platform engineer who builds through code and automates by default. Last week you would have been writing a lot of code!

Architecture, administration and product configuration alone are not sufficient. We want to understand what you personally implemented, tested, automated and supported in production.

At IFS, we're building the next generation of AI-native enterprise software, transforming how some of the world's largest organisations manage assets, operations and critical services.

This is an opportunity to work at the forefront of modern AI engineering, building intelligent products that combine Large Language Models (LLMs), agentic AI and cloud‑native technologies to solve complex, real‑world business challenges at enterprise scale.

We're looking for engineers who are passionate about building production AI systems and excited by the opportunity to shape the future of enterprise software.

Please note that this role requires demonstrable, hands‑on experience designing, building and shipping production AI applications.

IFS is a billion-dollar revenue company with 7000+ employees on all continents. We deliver award‑winning enterprise software solutions through the use of embedded digital innovation and a single cloud‑based platform to help businesses be their best when it really matters–at the Moment of Service™.

At IFS, we're flexible, we're innovative, and we're focused not only on how we can engage with our customers, but on how we can make a real change and have a worldwide impact. We help solve some of society's greatest challenges, fostering a better future through our agility, collaboration, and trust.

We celebrate diversity and accept that there are so many different perspectives in this world. As a truly international company serving people from around the globe, we realize that our success is tantamount to the respect we have for those different points of view.

By joining our team, you will have the opportunity to be part of a global, diverse environment; you will be joining a winning team with a commitment to sustainability; and a company where we get things done so that you can make a positive impact on the world.

We're looking for innovative and original thinkers to work in an environment where you can #MakeYourMoment so that we can help others make theirs.

If you want to change the status quo, we'll help you make your moment. Join Team Purple. Join IFS.

Job Description

At IFS, we’re building the next generation of AI-native enterprise software. We’re looking for a Principal Platform Engineer to build the shared authentication and authorisation capabilities that our product engineering teams depend on.

You should be a hands‑on platform engineer who builds through code and automates by default. Your experience might centre on infrastructure as code, deployment pipelines, automation, platform tooling or service integrations. What matters is that you have built reliable, repeatable capabilities that engineering teams use to deliver and operate software.

Your background may be in platform engineering, infrastructure, SRE, identity engineering or systems integration. What matters is substantial hands‑on experience building or extending platform capabilities through code and automation, supporting the delivery and operation of software.

A software development background is particularly valuable, but it is not a prerequisite. We welcome engineers whose coding experience has developed through platform engineering, infrastructure or SRE work.

Architecture, administration and product configuration alone are not sufficient. We want to understand what you personally implemented, tested, automated and supported in production.

We’re interested in what you have personally built and automated: how you provisioned it, tested changes, delivered it safely and enabled other teams to use it without depending on manual intervention. Identity and access is the domain you will work in; specialist experience in that domain is particularly welcome.

This is an opportunity to shape a critical platform capability, with substantial technical ownership and impact across our engineering organisation.

The job

We are hiring two Principal Platform Engineers to help unify authentication and authorisation across our next‑generation enterprise software platform.

We are consolidating a fragmented authorisation landscape into one model across three hosting environments: our cloud‑native platform, our legacy hosting platform and our lifecycle cloud. It must be correct, fast and reliable in distributed, multi‑tenant environments.

Our current stack includes SpiceDB backed by PostgreSQL for authorisation, and Curity for authentication, with Keycloak estates migrating onto it. These describe the systems you will work on; prior experience with every product is not required.

You will design and build platform services, APIs and automation, own them in production, and establish patterns that product engineering teams can adopt confidently. A central part of the role is making secure authentication and authorisation available through documented, automated, self‑service workflows.

This is a hands‑on role. You will write and review infrastructure and automation code, build platform integrations, and contribute to tooling and services, including those written in Go.

What we need to see

Platform engineering and automation

• Software platforms or shared services you have built and operated for application engineering teams.
• Infrastructure code, automation, delivery pipelines, integrations or platform tooling you have personally built and maintained.
• Automation covering provisioning, configuration, deployment, upgrades and recovery, managed through version control and repeatable delivery pipelines.
• Self‑service capabilities that